CVE-2022-40540

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

Score

CVSS 3.1 8.4 High

Status

Modified - product-security@qualcomm.com

Published

2023-03-10

Last modified

2024-08-03

Weaknesses

CWE-120

Affected products

• Sd888 5g Firmware (Qualcomm)
• Sd 8 Gen1 5g Firmware (Qualcomm)
• Sw5100 Firmware (Qualcomm)
• Sw5100p Firmware (Qualcomm)
• Wcd9380 Firmware (Qualcomm)
• Wcd9385 Firmware (Qualcomm)
• Wcn3980 Firmware (Qualcomm)
• Wcn3988 Firmware (Qualcomm)
• Wcn6850 Firmware (Qualcomm)
• Wcn6851 Firmware (Qualcomm)
• Wcn6855 Firmware (Qualcomm)
• Wcn6856 Firmware (Qualcomm)
• Wcn7850 Firmware (Qualcomm)
• Wcn7851 Firmware (Qualcomm)
• Wsa8830 Firmware (Qualcomm)
• Wsa8835 Firmware (Qualcomm)
• Snapdragon (Qualcomm Inc.)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1209597
• https://security.netapp.com/advisory/ntap-20230616-0001/
• https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin